On Sun, May 26, 2002 at 10:37:42AM -0500, James Tidman wrote: > I downloaded ethereal and determined these packets to be ARP packets. I > thought they would show up under the default PROTO, but maybe not. > > The packets never showed up in the ULOG file. I don't pass any paramters to > ipt_ULOG, the defaults seem to be OK. > > I don't know if ULOG will track ARP, I will keep looking at the source and > on the web......
no, as ARP is a seperate layer 3 protocol (independent from IP), no ARP packet will ever go through iptables and thus never get logged by any ULOG rule. > Thanks, > James -- Live long and prosper - Harald Welte / [EMAIL PROTECTED] http://www.gnumonks.org/ ============================================================================ GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M+ V-- PS++ PE-- Y++ PGP++ t+ 5-- !X !R tv-- b+++ !DI !D G+ e* h--- r++ y+(*)
